$ what we ship

Six layers of "keep the lights on".

Hosting done right disappears — you never think about it. Domains, SSL, backups, monitoring, malware, patching. We run all of it so you can go back to your business.

01

Managed hostingCloudflare, Vercel, WP Engine, AWS — whichever fits. Traffic scaled at the CDN edge, origin locked down, staging + prod separated.

02

Domain & DNS managementRegistration, transfers, DNSSEC, DMARC/SPF/DKIM for deliverability. All held in your name — never ours.

03

SSL & HTTPSFree Let's Encrypt auto-renewal or paid EV certs where compliance requires. HSTS + HTTP/3 tuned for AU/NZ latency.

04

Automated backupsDaily off-site backups with 30-day retention. Tested restore twice a year — because an untested backup is a wish.

05

Uptime & error monitoringUptimeRobot for external checks, Sentry for application errors, log aggregation for the audit trail. Alerts to your Slack.

06

Security & malwareWAF, brute-force blocking, daily malware scans, dependency patching. If your site gets defaced, we fix it same day.

$ our process

Six phases from migration to steady state.

Most hosting migrations go sideways because the DNS wasn't warmed or the redirects weren't audited. Ours don't — because we run the same runbook every time.

01

Migration prep & audit
Week 1

Full inventory of current hosting — where the site lives, where DNS lives, where email lives, where SSL is issued, what CMS version is running. Every risk logged before we touch a record.
- DNS record snapshot + email deliverability audit
- Current-host performance baseline
- CMS + plugin version + security-patch inventory
- Written migration plan with rollback for every step
02

DNS & email hardening
Week 1 – 2

DNS lifted to Cloudflare with DNSSEC. Email records (MX, SPF, DKIM, DMARC) audited and tightened so your invoices actually land in inboxes across Perth, Adelaide, and Auckland.
- DNS lift-and-shift to Cloudflare
- DNSSEC + registrar lock
- SPF, DKIM, DMARC records validated
- Mail-tester.com ≥ 9.5/10 score before go-live
03

Deployment & cutover
Week 2

Site copied to the new host on a staging URL first. Every page tested against the old for parity. Cutover happens at a low-traffic window with sub-5-minute TTL.
- Full site copy to staging on new host
- URL-by-URL parity check with the old host
- Low-TTL cutover at a scheduled quiet window
- Rollback plan tested end-to-end before switch
04

SSL & security hardening
Week 2 – 3

SSL issued and validated end-to-end. WAF tuned to your traffic pattern. Admin routes IP-restricted or behind SSO. WordPress hardened per Sucuri checklist.
- SSL A+ on SSL Labs
- Cloudflare WAF rules tuned to your traffic profile
- Admin panels locked to IP allowlist or SSO
- WP or CMS hardening checklist executed
05

Monitoring & alerting
Week 3

UptimeRobot pinging every minute, Sentry catching every JS + PHP error, Cloudflare Analytics wired to your Slack. Alerts on real incidents — no noise for 2am ghost traffic.
- 1-minute uptime checks from AU + NZ regions
- Sentry catching frontend + backend errors
- Alerts routed to your Slack or email, tuned for signal
- Weekly digest email of the numbers that matter
06

Handover & care plan
Week 3 → ongoing

Runbook handed to your team, incident-response protocol agreed, monthly care plan takes over. We stay on-call — real humans in Brisbane and Auckland, not a ticket queue.
- Runbook + incident-response playbook
- Monthly patching, backup verification, security scan
- Live human on-call — no offshore ticket queue
- Same-day response on production-down incidents

$ what you own

What lands in your hands.

Every account, every credential, every dashboard registered in your name from day one. If you leave us tomorrow, nothing to reclaim.

Hosting accounts

Cloudflare, Vercel, WP Engine — all registered under your business name. We hold delegated access, revocable in one click.

Domain registrar

Domain held on your registrar (usually Porkbun or Cloudflare Registrar), with registrar lock + DNSSEC enabled.

Backup archive

30-day rolling backups on S3 or R2 you own. Snapshot download available on request, no gatekeeping.

Monitoring dashboards

UptimeRobot, Sentry, Cloudflare Analytics — dashboards bookmarked to your team.

Runbook & incident plan

Every alert, every remediation, every 2am scenario documented in your Notion.

Monthly report

Uptime, response times, security events, patching log — plain English, no jargon padding.

$ tech stack

The stack we host on.

All mainstream, all well-supported across AU + NZ, all handoverable to any other agency if you outgrow us.

CDN & edge

Cloudflare
Fastly
CloudFront
Vercel Edge

Managed WP

WP Engine
Kinsta
Cloudways
SiteGround

Serverless

Vercel
Netlify
Cloudflare Pages
AWS Amplify

Uptime & errors

UptimeRobot
Sentry
Pingdom
Better Stack

Security

Cloudflare WAF
Sucuri
Wordfence
Snyk

Backups

Cloudflare R2
AWS S3 Glacier
BorgBackup
Restic

$ timeline & investment

Rough shape of a hosting engagement.

Setup is one-off. Care plans are monthly. Numbers below are averages across our active hosting book.

Setup timeline

0–0 weeks

Fresh setup on Cloudflare + Vercel: 1 week. Full migration from an existing host with DNS + email overhaul: 2–3 weeks.

Care plan (AUD)

$0 – $0 / mo

Includes hosting fees, monitoring, backups, monthly patching. Emergency response bundled — no hourly nickel-and-dime.

0

Sites on care plans

0%

Book-wide uptime

0 min

Median incident response

0

Data-loss events

$ questions

What people ask on the first call.

Direct answers, no upsell. If your question isn't here, we'll cover it live.

Do you host in Australia?

Depends on the site. Cloudflare and Vercel run edge nodes in Sydney, Melbourne, Perth and Auckland — traffic is served locally regardless of where the origin lives. For strict data-sovereignty needs (health, government) we use AWS Sydney or Azure Sydney regions with contractual assurance the data stays in-country.

Who owns the domain and hosting accounts?

You do — always. Every account is registered under your business name from day one, and we hold delegated access we can hand back with a single click. Domains held on your registrar (usually Porkbun or Cloudflare Registrar), never on ours.

What happens if my site gets hacked?

Care-plan clients: we start remediation same day. Malware removed, backups restored, forensic report on how it got in, hardening applied so it doesn't happen twice. No extra invoice for the incident work — it's what the care plan is for.

How often are backups actually tested?

Twice a year, minimum — we do a real restore drill to a scratch environment and verify the restored site is functional. An untested backup is a wish, not a backup.

Can I leave you and take everything with me?

Yes, easily. Every account is in your name. We provide a written offboarding kit — credentials, runbook, current config snapshot. Most clients are up and running with a new provider within a fortnight; we've made that path deliberately smooth.

Do you cover WordPress plugin updates?

Yes — monthly on a staging clone first, then promoted to production once green. Broken update rolled back automatically. Any incompatibility we can't resolve gets flagged with a fix path within 48 hours.

What's the response time for "the site is down"?

Median 14 minutes across the last 12 months. Alerts route to a real human on-call — not an offshore first-line queue. Guaranteed same-business-day response, usually much faster.

Fast hosting. Locked-down security.